{
  inputs,
  constants,
  config,
  pkgs,
  ...
}:

{
  imports = [ inputs.synix.nixosModules.open-webui-oci ];

  services.open-webui-oci = {
    enable = true;
    image = pkgs.dockerTools.pullImage {
      imageName = "ghcr.io/open-webui/open-webui";
      imageDigest = "sha256:8113fa5510020ef05a44afc0c42d33eabeeb2524a996e3e3fb8c437c00f0d792";
      hash = "sha256-KxMUORhvLb/MMc8gv3xULNgnAzO1N+Qi2/1lHzbuK6Q=";
      finalImageName = "ghcr.io/open-webui/open-webui";
      finalImageTag = "0.8.12";
    };
    externalUrl = "https://" + constants.services.open-webui-oci.fqdn;
    port = 8083;
    # environmentFile = config.sops.templates."open-webui-oci/environment".path;
    environment = {
      # AUDIO_STT_ENGINE = "openai";
      # AUDIO_TTS_ENGINE = "openai";
      ENABLE_OLLAMA_API = "False";
    };
  };

  # sops = {
  #   secrets."open-webui-oci/stt-api-key" = { };
  #   secrets."open-webui-oci/tts-api-key" = { };
  #   templates."open-webui-oci/environment".content = ''
  #     AUDIO_STT_OPENAI_API_KEY=${config.sops.placeholder."open-webui-oci/stt-api-key"}
  #     AUDIO_TTS_OPENAI_API_KEY=${config.sops.placeholder."open-webui-oci/tts-api-key"}
  #   '';
  # };

  # HOTFIX
  virtualisation.oci-containers.containers.open-webui.extraOptions = [ "--health-cmd=none" ];
}